Privacy Policy
Secret Key LLC ("we") operates Nib. This policy explains what we collect, why, and how long we keep it.
1. What we collect
- Account data. Email address, hashed password, plan, billing country, and the timestamps of sign-in and device approvals.
- Payment data. Handled by our payment provider. We receive a customer identifier, the last four digits of the card, and the status of each charge. We never see or store full card numbers.
- Usage data. Model, token counts, latency, request status, and credits charged. We store this per request so you can audit your spend.
- Content. Prompts, file contents, and model outputs are processed to complete your request. They are retained for a short window for debugging and abuse prevention, then deleted unless you ask us to keep them.
- Technical data. IP address, user agent, and request identifiers, used for security and rate limiting.
2. What we do not do
- We do not sell personal data.
- We do not use your code or prompts to train models.
- We do not use third-party advertising or session-replay trackers on the product or this site.
3. Model providers
To answer a request, we send your prompt and relevant context to the model provider you selected. Those providers process the request under their own terms. We route only to providers that contractually prohibit training on customer data. If you use your own key (BYOK), the request goes directly to your provider under your own agreement with them.
4. Retention
- Request content: up to 30 days for debugging and abuse review, then deleted.
- Usage metadata (model, tokens, credits): retained for 24 months for billing and accounting.
- Account data: retained while your account is active, and for 12 months after closure to meet tax and dispute obligations.
5. Sharing
We share data with processors that are necessary to run the service: our payment provider, our cloud host, our email provider, and the model providers that serve your requests. We share data with authorities only when legally required, and we will tell you unless prohibited.
6. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email [email protected] and we will respond within 30 days. You may also lodge a complaint with your local data protection authority.
7. Security
Credentials are hashed with a memory-hard function. API keys are stored as hashes and shown once at creation. Traffic to the gateway and this site uses TLS. Access to production data is limited to named personnel and logged.
8. International transfers
We process data in the United States and the European Union. Where data leaves the EEA or the UK, we rely on standard contractual clauses or an adequacy decision.
9. Children
Nib is not intended for anyone under 18. We do not knowingly collect data from children.
10. Changes
Material changes will be announced by email or in-app at least 14 days before they take effect.
11. Contact
Secret Key LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States
[email protected]